Skip to main content
Pre-release

This release is a pre-release and may not be stable for production use.

English | 繁體中文 | 简体中文 | 日本語

InferSpec

Reverse-infer OpenSpec specs from your codebase + git history + docs — designed for legacy code that has no spec.

CI License: MIT

Development-Driven Spec (DDS) — the inverse of Spec-Driven Development. From Code & Context to Clear Specs.

SDD vs DDS

Spec-Driven Development (SDD) is the discipline of writing the spec first, then implementing against it. It works beautifully on greenfield projects.

The real world is mostly brownfield. You inherit a 50K-line Flask service. There is no spec — just a Jira board from three years ago, a Confluence wiki nobody updates, and the git log. SDD has no entry point here.

InferSpec inverts the loop: Development-Driven Spec (DDS). Code already exists; treat it (plus git history, tickets, docs, MCP-attached wikis) as the source of truth and reverse-infer a structured OpenSpec spec from it. Once the spec exists, you can switch back to SDD for new work.

Mode Starting point Output
SDD (Spec-Driven Development) A spec Code
DDS (Development-Driven Spec) Code + history + docs A spec

Why InferSpec?

InferSpec reads all of it and produces a structured OpenSpec spec — one spec.md per capability — with each Requirement cited back to file:line or a ticket ID. Ambiguities are marked [GAP]/[TBD] so you can fill them interactively in a follow-up pass.

How it works

┌─────────────────────────────────────────────────────────────┐
│  Layer 1 — uvx Python package: installer + CLI               │
│  (never calls an LLM API)                                   │
└─────────────────────────────────────────────────────────────┘
                       │ installs skills into
                       ▼
┌─────────────────────────────────────────────────────────────┐
│  Layer 2 — Skills run inside Claude Code / Codex / Gemini   │
│  / Copilot / OpenCode and use the host's subscription AI    │
└─────────────────────────────────────────────────────────────┘

InferSpec leans on your existing AI subscription. No API keys, no cloud endpoints to configure.

Install

uvx inferspec init --platform claude-code

That drops /inferspec-scan + /inferspec-cap into .claude/skills/ for the current directory. See inferspec platforms for the full list.

Updating

When a new version of the inferspec package ships, the bundled skill files inside each repo's .claude/skills/ (or equivalent) stay frozen at the version that was installed. Refresh them with:

pip install -U inferspec        # or: uvx --refresh inferspec ...
inferspec update                # in each repo where you ran `inferspec init`

inferspec update reads .inferspec.yaml to find the platforms you previously installed into, then re-copies the bundled skills (no prompts). Use inferspec update --check to report drift without writing anything, or inferspec doctor to see the installed-vs-package version per platform.

Usage

Open your AI agent in the target repo. Two skills are available:

/inferspec-scan — bulk-infer specs for every capability:

/inferspec-scan

It runs graphify to cluster files into capabilities, then for each cap reads code + git log + docs/ + (if available) Jira/Confluence via MCP + URLs via the host's WebFetch, and drafts openspec/specs/<cap>/spec.md in OpenSpec format. Drafts may contain [GAP] / [TBD] markers where the AI was unsure.

/inferspec-cap <slug> — single-capability deep dive with interactive Q&A:

/inferspec-cap user-auth
/inferspec-cap "rate limiting"       # fuzzy match
/inferspec-cap                       # interactive picker
/inferspec-cap new-feature --new     # bootstrap a brand-new cap

For one capability, the skill solicits Jira/Confluence/URLs you have, then asks one focused question per [GAP] marker until the spec converges. On exit it offers to commit the result for you.

Multi-source artefacts are picked up automatically — InferSpec detects MCP servers in your host environment rather than shipping its own clients.

Output format

Same convention as OpenSpec:

## Purpose

User authentication for the order portal — replaced the legacy SSO bridge
after incident-1234. See AUTH-456.

## Requirements

### Requirement: Rate Limiting
The system SHALL reject login attempts after 5 failures within 60 seconds.

**Source:** auth.py:18-21, [JIRA AUTH-456]

#### Scenario: Lockout after repeated failures
- **GIVEN** 5 failed attempts in the last minute
- **WHEN** another POST /auth/login arrives
- **THEN** server returns 429

Status

v0.3 alpha. Ships:

  • /inferspec-scan — bulk mode, plus design-doc auto-discovery, OpenAPI/Swagger detection, --since <rev> incremental scan, glossary enforcement (.inferspec-glossary.txt), and removal proposals under openspec/changes/
  • /inferspec-cap <slug> — interactive single-cap mode, also covers iterative gap-fill on existing specs
  • inferspec update — refresh installed skill bundles per repo

License

MIT

Metadata

Release files for inferspec 0.3.0a0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for inferspec 0.3.0a0
File Size Uploaded Provenance Actions
inferspec-0.3.0a0.tar.gz 68.4 kB With provenance Details for inferspec-0.3.0a0.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for inferspec 0.3.0a0
File Interpreter ABI Platform Actions
inferspec-0.3.0a0-py3-none-any.whl Python 3 none any Details for inferspec-0.3.0a0-py3-none-any.whl

Total release size: 93.8 kB

Release files / inferspec-0.3.0a0.tar.gz

Download URL inferspec-0.3.0a0.tar.gz
Size 68.4 kB
Tags Source
SHA-256 checksum
How to use checksums
5b4a76a75451a184e2ba60f4fc8ea060d6dc840bdf4c2d1ec32af649f3449cb0
BLAKE2b-256 checksum
How to use checksums
b674757c46e0d55224ddc58686c3c7be29ac0d23925112415e4613119c987fdf
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/6.1.0 CPython/3.13.12

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on May 29, 2026.

Transparency log

Release files / inferspec-0.3.0a0-py3-none-any.whl

Download URL inferspec-0.3.0a0-py3-none-any.whl
Size 25.4 kB
Tags Python 3
SHA-256 checksum
How to use checksums
62688c10f8dcba6befb84350e3ef2225b70f894d2cccd8c81dddbbe0397d99ab
BLAKE2b-256 checksum
How to use checksums
eb7b2f03b3c65dbf1c81dd58dad618297d74e811a986b474a01211c1514a505f
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/6.1.0 CPython/3.13.12

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on May 29, 2026.

Transparency log

Security for inferspec 0.3.0a0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

All 2 files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for inferspec-0.3.0a0.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on May 29, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page